Non-Human Identity Security Engineer

Salary: $80,000 - 104,000 per year Requirements:

• We require a bachelors degree in information technology, cybersecurity, computer science, engineering, or equivalent practical experience.
• We look for at least 5 years of hands-on experience in identity and access management, cybersecurity engineering, infrastructure engineering, or cloud security.
• We need 3+ years of direct experience managing non-human identities, service accounts, application identities, workload identities, or machine authentication technologies.
• We expect strong hands-on administration experience with Microsoft Entra ID, Active Directory, or comparable identity platforms.
• We require experience implementing and supporting secrets management, credential vaulting, and privileged access solutions.
• We need strong scripting and automation capabilities with PowerShell, Python, Bash, or similar tools.
• We expect experience with OAuth 2.0, OpenID Connect, SAML, Kerberos, LDAP, certificates, and PKI technologies.
• We require experience supporting Azure, AWS, Google Cloud, or multi-cloud environments.
• We look for the ability to analyze logs, troubleshoot authentication failures, and resolve complex identity-related issues.
• We require experience working within enterprise change management, incident management, and operational support processes.
• We need strong verbal and written communication skills and the ability to collaborate across technical teams.
• Preferred qualifications include hands-on experience with CyberArk, HashiCorp Vault, Delinea, BeyondTrust, SailPoint, Microsoft Entra Workload Identities, or similar platforms.
• Additional strengths include experience managing certificate lifecycles and public/private key infrastructure.
• Experience securing Kubernetes, containers, microservices, and cloud-native applications would be advantageous.
• Familiarity with Infrastructure as Code tools such as Terraform, Bicep, ARM, or CloudFormation would be a plus.
• Experience with SIEM platforms and identity security monitoring is also desirable.
• Relevant certifications such as CISSP, CISM, Security+, Microsoft Identity and Access Administrator, or CyberArk Defender/Sentry would be beneficial.
• Candidates within commuting distance of our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office according to the stated onsite schedule.

• We engineer, implement, and support enterprise non-human identity solutions across cloud, on-premises, and hybrid environments.
• We develop and maintain automated provisioning, credential rotation, secret management, certificate lifecycle management, and deprovisioning workflows.
• We handle onboarding and migration of service accounts, managed identities, workload identities, application accounts, and machine credentials into our enterprise identity management platforms.
• We configure, deploy, and support privileged access controls for non-human identities using PAM and secrets management technologies.
• We partner with development, application, and infrastructure teams to remove hardcoded credentials and replace legacy authentication methods with modern identity solutions.
• We design, build, and maintain automation using PowerShell, Python, REST APIs, Terraform, and other scripting or orchestration technologies.
• We integrate identity controls into CI/CD pipelines and DevSecOps workflows.
• We troubleshoot and resolve authentication, authorization, federation, certificate, token, and credential-related issues across enterprise applications.
• We support large-scale remediation efforts involving dormant service accounts, excessive permissions, unmanaged secrets, and identity-related security vulnerabilities.
• We configure and administer identity platforms, including directory services, cloud identity providers, PAM solutions, certificate authorities, and secrets vaults.
• We monitor non-human identity activity and investigate suspicious authentication events, credential misuse, or policy violations.
• We conduct access reviews and entitlement analysis to uphold least-privilege principles.
• We create operational runbooks, implementation guides, engineering standards, and technical documentation.
• We partner with Security Operations and Incident Response teams during investigations involving machine identities and application credentials.
• We participate in after-hours support, major incident response, and maintenance activities when needed.

• ARM
• AWS
• Active Directory
• Azure
• Bash
• CI/CD
• Cloud
• DevSecOps
• Incident Management
• Support
• Kubernetes
• LDAP
• OAuth
• OpenID
• PowerShell
• Python
• REST
• SAML
• Security
• Sentry
• Terraform
• microservices
• API
• DevOps
• IAM

More:

We are Edward Jones, a Fortune 500 financial services firm where people come first. With more than 9 million clients and 20,000 financial advisors across the U.S. and Canada, we are privately owned and focused on our clients rather than shareholders. We are building an innovative, flexible, and inclusive workplace where associates are seen, heard, respected, and supported, and where we aim to create positive impact for our clients, colleagues, communities, and society. This Senior Non-Human Identity Engineer role is part of our highly technical, hands-on team and is centered on engineering and operational management of machine identities across cloud, on-premises, and hybrid environments. We offer a comprehensive benefits package that includes medical, prescription drug, dental, vision, disability, life, AD&D, retirement savings, tax-advantaged accounts, paid holidays, vacation, sick time, personal days, volunteer time, and potential bonus and profit-sharing opportunities. We also support a hybrid office schedule for associates near our Tempe, AZ and St. Louis, MO home offices.

last updated 37 week of 2026